/mandos/trunk : changes

» Changes to dracut-module/module-setup.sh from revision 1332

To get this branch, use:

bzr branch
http://term.recompile.se/loggerhead/mandos/trunk

From Revision 1332

expand all

Rev	Summary	Authors	Date
1326	Fix kernel command line option "mandos=connect:<ip>:<port>" ... Fix kernel command line option "mandos=connect:<ip>:<port>" with dracut When using dracut, the kernel command line option "mandos=connect:<ip>:<port>" is ignored entirely. Fix this. * Makefile (install-client-nokey, uninstall-client): Install (and uninstall) "dracut-module/cmdline-mandos-systemd.sh". * debian/mandos-client.lintian-overrides (mandos-client binary): Added "executable-in-usr-lib [usr/lib/dracut/modules.d/90mandos/cmdline-mandos-systemd.sh]" * dracut-module/ask-password-mandos.service ([Service]/ExecStart): Append "$MANDOS_CLIENT_CONNECT". * dracut-module/cmdline-mandos-systemd.sh: New file. * dracut-module/cmdline-mandos.sh: If the "mandos=connect:<ip>:<port>" kernel command line option is used, append suitable options to /etc/mandos/plugin-runner.conf. * dracut-module/module-setup.sh: Install dracut "cmdline" hook "cmdline-mandos-systemd.sh".	Teddy Hogeborn	1 month ago
1201	Allow users to alter ask-password-mandos.service Allow users to alter ask-password-mandos.service If a user uses dracut with systemd and wishes to modify the options passed to password-agent(8mandos) or mandos-client(8mandos), they should be able to do so by simply creating a file /etc/systemd/system/ask-password-mandos.service.d/override.conf, containing, for instance: [Service] Environment=MANDOS_CLIENT_OPTIONS=--debug Adding PASSWORD_AGENT_OPTIONS should also be possible (but should not normally be needed). * dracut-module/ask-password-mandos.service ([Service]/ExecStart): Add $PASSWORD_AGENT_OPTIONS before "--" and "$MANDOS_CLIENT_OPTIONS" to end of line. * dracut-module/module-setup.sh (install): Install all files named /etc/systemd/system/ask-password-mandos.service.d/*.conf if any exists. Also add --dh-params before $MANDOS_CLIENT_OPTIONS instead of at end of line.	teddy at recompile	6 years ago
1127	Add dracut(8) support Add dracut(8) support Add support for the dracut(8) system for generating initramfs image files; dracut is an alternative to the "initramfs-tools" package. * .bzrignore (dracut-module/password-agent): Ignore new binary file. * dracut-module: New directory for the dracut module. * INSTALL (Prerequisites/Libraries/Mandos Client): Add dracut as an alternative to initramfs-tools, and also add GLib. * Makefile (DRACUTMODULE, GLIB_CFLAGS, GLIB_LIBS): New. (CPROGS): Add "dracut-module/password-agent". (DOCS): Add "dracut-module/password-agent.8mandos". (dracut-module/password-agent.8mandos): New. (dracut-module/password-agent.8mandos.xhtml): - '' - (dracut-module/password-agent): - '' - (check): Add command to run tests of password-agent(8mandos). (install-client-nokey): Also install the dracut module directory, its files, and the password-agent(8mandos) manual page. (install-client): To update the initramfs image file, run update-initramfs or dracut depending on what is installed. (uninstall-client): - '' - and also uninstall the the files in the dracut module directory, that directory itself, and the password-agent(8mandos) manual page. * debian/control (Build-Depends): Add "libglib2.0-dev (>=2.40)". (Package: mandos-client/Depends): Add "dracut (>= 044+241-3)" as an alternative dependency to initramfs-tools. (Package: mandos-client/Conflicts): New; set to "dracut-config-generic". (debian/mandos-client.README.Debian): Document alternative commands to update the initramfs image for when dracut is used. * debian/mandos-client.postinst (update_initramfs): Use alternative commands to update the initramfs image for when dracut is used. * debian/tests/control (password-agent, password-agent-suid): Add two new tests. * dracut-module/ask-password-mandos.path: New. * dracut-module/ask-password-mandos.service: - '' - * dracut-module/cmdline-mandos.sh: - '' - * dracut-module/module-setup.sh: - '' - * dracut-module/password-agent.c: - '' - * dracut-module/password-agent.xml: - '' - * initramfs-unpack: Use the dracut "skipcpio" command, if available. Also be more flexible and try hard to detect where compressed data starts. * plugins.d/mandos-client.xml (SECURITY): Be more precise that the mandos-client binary might not always be setuid, but that the program assumes that it has been started that way. * plugins.d/password-prompt.c: Add new "--prompt" option. (conflict_detection): First try to detect the new PID file of plymouth. (main): Define and use new "prompt" variable. * plugins.d/password-prompt.xml (SYNOPSIS): Show new --prompt option. (DESCRIPTION): Describe new behavior of looking for plymouth PID file. (OPTIONS): Document new "--prompt" option. (ENVIRONMENT): Clarify that the CRYPTTAB_SOURCE and CRYPTTAB_NAME environment variables are not used if the --prompt option is used. Remove unnecessarily specific details about where the CRYPTTAB_SOURCE and CRYPTTAB_NAME comes from, since this can now be either initramfs-tools or dracut. (SEE ALSO): Remove superfluous crypttab(5) reference, and add commas to separate the other references. * plugins.d/plymouth.c: Add new "--prompt" and "--debug" options. (debug): New global flag. (fprintf_plus): New function, used for debug output. (exec_and_wait): Add extra "const" to "argv" argument. (main): Define and use new "prompt" variable. Add debug output. (main/options, main/parse_opt): New; used to parse options. * plugins.d/plymouth.xml (SYNOPSIS): Show new options. (OPTIONS): Document new options. (ENVIRONMENT): Clarify that the cryptsource and crypttarget environment variables are not used if the --prompt option is used. Remove unnecessarily specific details about where the cryptsource and crypttarget comes from, since this can now be either initramfs-tools or dracut. (EXAMPLE): Add an example using an option. (SEE ALSO): Remove superfluous crypttab(5) reference. * plugins.d/splashy.xml (ENVIRONMENT): Clarify that the cryptsource and crypttarget environment variables are not used if the --prompt option is used. Remove unnecessarily specific details about where the cryptsource and crypttarget comes from, since this can now be either initramfs-tools or dracut. (SEE ALSO): Remove superfluous crypttab(5) reference. * plugins.d/usplash.xml (ENVIRONMENT): Clarify that the cryptsource and crypttarget environment variables are not used if the --prompt option is used. Remove unnecessarily specific details about where the cryptsource and crypttarget comes from, since this can now be either initramfs-tools or dracut. (SEE ALSO): Remove superfluous crypttab(5) reference.	Teddy Hogeborn	6 years ago